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Amendments to the Claims 



This Hsting of claims will replace all prior versions and listings of claims in the application: 
Listing of claims: 

1 . (currently amended) A method of generating a shared key by a first correspondent, wherein 
said key is computable by a second correspondent, said method comprising the steps of: 

a) said first correspondent making a first short term public key available to said second 
correspondent over a communication channel; a first short term public k e y; 

b) said first correspondent obtaining a second short term pubhc key fi-om said second 
correspondent; 

c) said first correspondent computing a first e}q)onent derived fi-om [[said]] a first short term 
private key, said first short term public key, and [[said]] a first long term private key; 

d) said first correspondent computing a second exponent derived fi*om said first short term 
private key, said first [[long]] short term public key, [[said]] a second short term public key 
and said first long term private key; 

e) said first correspondent computing a first simultaneous exponentiation of said first 
exponent with said second short temi public key and said second exponent with [[said]] a 
second long term public ke y; and 

f) said first correspondent using the results of said first simultaneous exponentiation to 
generate said shared key . 

2. (new) The method of claim 1 fiirther con^rising the steps of 

g) said second correspondent making said second short term public key available to said first 
correspondent over said communication channel; 

h) said second correspondent obtaining said first short term public key fi"om said first 
correspondent; 

i) said second correspondent computing a third exponent derived fi*om a second short term 
private key, said second short term public key, and a second long term private key; 

j) said second correspondent computing a fourth exponent derived fi*om said second short 
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term private key, said second short term public key, said second long term private key, and 
said first short term public key; 

k) said second correspondent computing a second simultaneous exponentiation of said third 
exponent with said first short term public key and said fourth exponent with a first long term 
public key; and 

1) said second correspondent using the results of said second simultaneous exponentiation to 
generate said shared key. 

3. (new) The method of claim 2 wherein steps a) and g) are performed in parallel, steps b) and 
h) are performed in parallel, steps c) and d) are performed in parallel with steps i) and j), and 
steps k) and 1) are performed in parallel with steps e) and f). 

4. (new) The method of claim 1 wherein said simultaneous exponentiation is performed by: 

- establishing a window of width 

- establishing a table of small exponentiations of said second short term public key, and a 
table of small exponentiations of said second long term public key to provide a series 
potential exponentiations representing said first and second exponents; and 

- examining said tables using said window w until said shared key is computed. 

5. (new) The method of claim 4 wherein said step of examining said tables includes retrieving 
the corresponding powers of values of said second short term public key and said second 
long term public key within said window w, accumulating the product of corresponding 
entries fi'om said tables and squaring said product w times, and examining further windows 
repeatedly until said shared key is computed. 

6. (new) The method of claim 1 wherein said simultaneous exponentiation is performed by: 

- storing values of said first and second exponents in first and second registers respectively, 
each register having an associated pointer; 

- using said pointers selectively accumulate and multiply corresponding values stored in said 
registers; and 

- repeatedly multiplying said values until said shared key is computed. 
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7. (new) The method of claim 1 implemented in an elliptic curve cryptosystem. 

8. (new) The method of claim 7 wherein said simultaneous exponentiation includes 
simultaneous multiple scalar mukiplication using a window of width w, and tables of small 
exponentiations of said second short term public key and said second long term public key. 
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